Part 2: – Configuring Service Applications, Sites, and Verifying our Work

Part 3: – Test out Using Web Parts and Communicating Securely across Web Applications with Kerberos

Synopsis

In Part 1 we covered the installation of SQL, creating SPN’s for SQL, creating and configuring Service Accounts for SharePoint and the requite SPNs for SharePoint Service Applications and Web Applications. In this Part 2 we will pick up from there an build out the following

Create, Configure Search Service Application

Create Kerberos Authentication Web Applications for

Intranet Site – Portal

Team Site – Teams

My Site – My

Create Site Collections for all three

Part 5: How to Make it Work

NEXT I WILL START CREATING SERVICE APPLICATIONS

MY FIRST ONE WILL BE SEARCH SO WHEN I CREATE MY SITES, THEY CAN ALREADY BE SQUARED AWAY FOR CRAWLING AND SEARCHING

So, right now my Service Applications is Naked.. lets get Search done first so when we create or Web Apps they will be added to the Content Source of the Search Service Applicaitons.

Screen clipping taken: 8/14/2010 11:29 AM

Screen clipping taken: 8/14/2010 11:39 AM

Screen clipping taken: 8/14/2010 11:49 AM

Screen clipping taken: 8/14/2010 11:51 AM

Now I will create my Web Apps for

Portal

Teams

My

Right now the only Site is the Admin Site

Screen clipping taken: 8/14/2010 12:01 PM

We begin by creating a new Web App for our Portal

Screen clipping taken: 8/14/2010 12:03 PM

Change the Auth Provider to Kerberos

Screen clipping taken: 8/14/2010 12:04 PM

Create a new App Pool with the Managed Account that we have and already created the SPN for

Name your Content DB appropriately

Screen clipping taken: 8/14/2010 12:05 PM

Accept the other Defaults

Screen clipping taken: 8/14/2010 12:06 PM

Once you click OK you will get prompted about the use of Kerberos

Screen clipping taken: 8/14/2010 12:06 PM

Screen clipping taken: 8/14/2010 12:09 PM

Comfirmation is provided

Screen clipping taken: 8/14/2010 12:10 PM

Verify Auth Provider

Screen clipping taken: 8/14/2010 12:11 PM

Click Default

Screen clipping taken: 8/14/2010 12:14 PM

Screen clipping taken: 8/14/2010 12:14 PM

Now lets create a Site collection

Screen clipping taken: 8/14/2010 12:18 PM

Screen clipping taken: 8/14/2010 12:20 PM

Screen clipping taken: 8/14/2010 12:48 PM

And if all goes well

Screen clipping taken: 8/14/2010 1:22 PM

Let us now verify that Kerberos is what was used to get us to this point

We will use a variety of techniques

FIRST THRU IIS

Screen clipping taken: 8/14/2010 1:27 PM

Screen clipping taken: 8/14/2010 1:31 PM

Screen clipping taken: 8/14/2010 1:32 PM

Screen clipping taken: 8/14/2010 1:39 PM

You can also run Klist on the WFE

Screen clipping taken: 8/14/2010 1:56 PM

This is also what we have as far as Databases created so far based on our configs